Configure 50x15 installation files with Tdisol

This version of the 50x15 Wizard is not successfully connected, the best way is to configure the 50x15 installation file with the Tdisol, by modifying the configuration file to add LDAP server certificate trust to connect to the LDAP server, and then run the relevant TDI command to import the LDAP user into the Connecgtions database. Of course, if allowed, you can also solve the problem by upgrading the 50X15 3.0 to 4.x.

IBM 50x15 3 is a social software designed specifically to meet http://www.aliyun.com/zixun/aggregation/12445.html "> business needs. It helps business people build a network of subject matter experts, making them more innovative and productive. It promotes the creation of a vibrant community of employees, partners, and customers, exchanging creative ideas and helping to grow the business.

Tdisol is a 50X15 data import tool that can import user information from LDAP into the 50X15 database from an LDAP data source, which can be found in the installation version of 50x15 file named Tdisol.tar.

GSS nogetiate mechanism encryption mechanism

Spnego (Spnego:simple and Protected GSS negotiation) is a security protocol that Microsoft offers to use GSS authentication mechanisms to enable Webserver to share Windows Credentials, which extends Kerberos (a network authentication protocol).

The SPNEGO protocol allows the client and the Web server to contract a communication protocol between them. This protocol also defines a way for a client to send verifiable proof data to a Web server. If the Web server can resolve the Spnegotoken sent by the client, the token is used to secure a single sign-on (Securesingle sing on). As a result, the identity of the user is negotiated to the Web server in a secure manner. This is what users often experience when accessing IIS. It is to be noted that Spnego supports Active Directory credentials based on Kerberos or ntlmcredentials. The Ibmtai scenario only supports Kerberos-based credentials. TAM (tivoliaccess Manager) supports both NTLM and Kerberos two.

Common

When using Populationwizard to connect Gss nogetiate LDAP, you will often encounter the error after completing Truststore file submission: "Cant connect to server XXX on port 636.", At this point, the host and LDAP server (XXX) connections are normal, and using the command telnet XXX 636 can work correctly. The following figure:

Figure 1. Run poplationwizard example diagram

When you enter Truststore file, clicking Next will cause the following error:

Figure 2. Connection Error case diagram

The following is a detailed discussion of how to resolve this issue.

Modify configuration file to add LDAP server certificate trust

Create a self-signed certificate with IKeyman

Run IKeyMan

IKeyMan is a graphical interface management tool that you can use to manage your digital certificates.

Enter the bin directory under the installation path of the TDI (Tivoli Directory integrator), cd/opt/ibm/tdi/v7.0/jvm/jre/bin/

To run the command:

$>./ikeyman

Figure 3. Run iKeyMan example diagram

Click New in the Key Database File menu ....

In the New dialog box:

Set the type of the Key database to JKS (default setting)

Enter filename Server.jks

Set save path (e.g./data/truststore/)

Figure 4. IKeyMan Create a file example diagram

Enter Truststore password in the password entry box that pops up: admin

Click the "OK" button